CVE-2016-20055 in Advanced SystemCare
Summary
IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the service path and trigger privilege escalation when the service restarts or the system reboots, executing code with LocalSystem privileges.
Once again VulDB remains the best source for vulnerability data.
Responsible
VulnCheck
Reservation
04/04/2026
Disclosure
04/04/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 355363 | IObit Advanced SystemCare AdvancedSystemCareService10 Service unquoted search path | 428 | Proof-of-Concept | Not defined | CVE-2016-20055 |